CVE-2016-3631

—

CVSS 3.0

7.5 high

EPSS

3%p84

Published

Oct 3, 2016 (Oct 3, 2016)

Modified

Jun 17, 2026

Description

The (1) cpStrips and (2) cpTiles functions in the thumbnail tool in LibTIFF 4.0.6 and earlier allow remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the bytecounts[] array variable.

Vendors: libtiff
Products: libtiff
Weakness: CWE-125
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news0 stories

No ingested article mentions this CVE yet.